$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: R+ZYOutCCUaVp+un//7XdfX5h5oiWo6P7OJ8KmtMa4Q= Subject key identifier: B5:07:25:14:88:80:36:90:F2:FB:DF:C2:AC:1A:8E:60:A7:D3:2F:7F Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 09AA Signing time: Fri 22 Aug 2025 20:10:41 +0000 Manifest this update: Fri 22 Aug 2025 20:10:40 +0000 Manifest next update: Fri 29 Aug 2025 20:10:40 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: QP0TxDmr++MysQM99Coio2RPlojWQHExcpVffNq0H5U=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Aug 22 20:10:40 2025 GMT Not After : Aug 29 20:10:40 2025 GMT Subject: CN=68a8cec1-92c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:a9:c1:d1:fd:dc:f8:2e:ac:28:8e:20:f5: 15:f7:56:c9:6e:81:36:56:30:cd:7d:c3:eb:58:69: 6c:98:a1:1f:bf:aa:65:1e:b1:2d:78:8c:89:af:f7: 92:80:b5:d0:ee:9d:ea:ce:fc:26:58:c6:a8:f3:58: ad:f4:29:f1:36:09:3b:83:ce:53:f8:c9:ca:b3:46: 0d:b9:b6:04:eb:c6:60:3c:c3:96:7b:ee:b5:34:ae: 2b:fe:00:bd:0d:97:77:a5:3a:c1:f1:c0:38:f7:7c: 67:f6:16:de:db:b5:10:f0:e5:f4:f3:14:d7:51:39: 8d:77:86:60:cc:a0:28:24:6f:0d:81:c8:18:ab:4b: 5a:71:bd:93:c2:b9:95:6d:9e:0e:d1:5d:ed:39:1f: 22:38:05:78:a1:0e:76:db:14:88:f9:03:e7:fa:a7: a5:c3:d6:ab:6e:65:2b:1a:e9:e3:94:c8:c0:1e:95: ad:82:7f:5c:02:3c:25:d4:89:9e:d9:e0:6b:9f:9f: 1c:9e:6d:9d:bd:cd:fa:89:98:b1:86:f2:96:92:2a: cf:0c:6b:66:2c:13:b8:1a:75:b6:5b:26:90:05:e5: 7f:fd:5e:09:a1:8e:dc:99:87:94:d4:0b:45:6e:16: 49:dc:fd:ea:35:cf:57:79:bf:05:c4:6b:fd:ef:ff: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:25:14:88:80:36:90:F2:FB:DF:C2:AC:1A:8E:60:A7:D3:2F:7F X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:32:88:84:ad:67:84:78:33:ec:08:9a:48:2a:b2:6c:62:c4: 8c:c3:55:d0:07:18:b4:1d:0a:fd:32:86:fd:d6:31:8d:6b:2d: 9a:a9:1c:ff:aa:65:c3:7d:23:95:68:bc:b5:c5:1f:3a:8c:cc: 1d:b9:77:d7:ed:b9:26:d4:91:67:76:5d:d0:35:f7:db:11:38: 4f:3a:9c:02:15:5a:f6:ec:62:c6:17:5f:a9:18:a4:fe:b5:95: 68:05:fe:d4:eb:df:57:74:48:87:74:3e:f1:c7:3f:25:23:ca: dc:d6:4d:c3:32:f5:ec:49:9b:a1:cc:b4:c9:3b:02:d5:62:c8: 0e:2f:b9:1e:8d:49:87:c6:d6:7a:96:20:e3:96:e0:ac:fc:74: 0b:63:9f:16:13:55:a8:00:d7:1b:55:89:9a:bb:cc:5c:83:0c: 45:82:97:6e:29:d7:50:a3:59:e3:7e:1c:a5:2f:2a:35:f3:42: 14:c7:b7:85:99:4c:a0:f2:cc:70:7e:9a:ad:65:ab:3e:ef:d7: 93:66:b7:13:18:89:54:b3:04:e6:08:59:82:37:a4:23:ab:a1: 34:40:6a:5f:57:53:e9:2d:09:9f:be:6e:99:de:e3:19:9d:ac: 17:7a:0e:a6:8b:9f:a5:63:65:01:54:6b:82:e8:1d:8e:39:d2: 94:7a:3b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUwODIyMjAxMDQwWhcNMjUwODI5MjAxMDQwWjAYMRYwFAYD VQQDEw02OGE4Y2VjMS05MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AOpwdH93PgurCiOIPUV91bJboE2VjDNfcPrWGlsmKEfv6plHrEteIyJr/eS gLXQ7p3qzvwmWMao81it9CnxNgk7g85T+MnKs0YNubYE68ZgPMOWe+61NK4r/gC9 DZd3pTrB8cA493xn9hbe27UQ8OX08xTXUTmNd4ZgzKAoJG8NgcgYq0tacb2TwrmV bZ4O0V3tOR8iOAV4oQ522xSI+QPn+qelw9arbmUrGunjlMjAHpWtgn9cAjwl1Ime 2eBrn58cnm2dvc36iZixhvKWkirPDGtmLBO4GnW2WyaQBeV//V4JoY7cmYeU1AtF bhZJ3P3qNc9Xeb8FxGv97/8yXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUHJRSI gDaQ8vvfwqwajmCn0y9/MB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVMoiErWeEeDPsCJpIKrJsYsSMw1XQBxi0HQr9Mob91jGNay2aqRz/ qmXDfSOVaLy1xR86jMwduXfX7bkm1JFndl3QNffbEThPOpwCFVr27GLGF1+pGKT+ tZVoBf7U699XdEiHdD7xxz8lI8rc1k3DMvXsSZuhzLTJOwLVYsgOL7kejUmHxtZ6 liDjluCs/HQLY58WE1WoANcbVYmau8xcgwxFgpduKddQo1njfhylLyo180IUx7eF mUyg8sxwfpqtZas+79eTZrcTGIlUswTmCFmCN6Qjq6E0QGpfV1PpLQmfvm6Z3uMZ nawXeg6mi5+lY2UBVGuC6B2OOdKUejuX -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:22 2025 by rpki-client